Tamhu

Occupations · Computer and Mathematical

Digital Forensics Analysts

Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.

O*NET 30.3 Database (USDOL/ETA) · occupation code 15-1299.06

Software and tools

A dot marks what O*NET flags as in demand.

Amazon Web Services AWS software●Ansible software●Apple iOS●Apple macOS●Bash●Border Gateway Protocol BGP●C●C#●C++●Extensible markup language XML●Go●Google Workspace software●Hypertext markup language HTML●IBM Terraform●JavaScript●Kubernetes●Linux●Microsoft Access●Microsoft Active Directory●Microsoft Azure software●Microsoft Excel●Microsoft Office software●Microsoft PowerPoint●Microsoft PowerShell●Microsoft Windows●Microsoft Windows Server●Oracle Java●PHP●

O*NET 30.3 software skills · hot-technology flag

What your tools are worth

Occupation-based, not posting-based: how much employment, pay and projected growth sit behind each tool. It is not a count of job ads.

ToolValueSpread across occupations
C#8816 → 55 occupations since 2015
Python8857 → 132 occupations since 2015
C8751 → 69 occupations since 2015

What your tools are worth

Locked

The same score for every tool in this occupation, plus the ones you ticked and the ones you did not.

Open in your report →

What this work is actually like

Conditions rated against the average across all occupations — only what makes this job different is listed.

4 / 5Considerable preparation — a four-year degree plus several years in the field.

O*NET 30.3 Job Zones

What kind of person the work suits

Occupational interest profile, rated 1 to 7.

Investigative6.1
Conventional6.0
Realistic3.2

O*NET 30.2 occupational interests (RIASEC)

How this job is advertised

The same work is posted under many titles — this is what to search for.

Cyber AnalystThreat AnalystDigital AnalystMalware AnalystSecurity AnalystThreat ResearcherOperations AnalystIncident ResponderCyber Threat HunterCyber Threat AnalystDigital InvestigatorDigital Media AnalystCyber Defense AnalystLegal Digital Analyst

O*NET 30.3 job titles reported for this occupation

Get this as a personal report

The same sourced evidence, recut for the closest published view of your city, state or industry, as a dated PDF.

Free page vs. the $29 report

The page above is a public national reference, identical for every reader — and we deliberately give away a lot of it. The report does three things this page cannot: it answers the question you type in your own words, using only figures that appear in the report with their sources; it ranks your city among all 445 metros instead of the twelve shown here; and it places your level on the employer pay ladder. Choose $49 for the wider comparison of industries, places and next moves, $99 to add named employers and the international purchasing-power index.

The questions that change the report

Only what the data can actually act on. Your city picks the published cut; your level places you on the employer pay ladder; your question is answered using the report's own figures and nothing else.

Two fields are required: your email and the profession. Everything below is optional — each answer you leave empty simply removes one section from the report.

Nothing answered yet — the report still works, it is just shorter

Your level

Median employer offer at each level

optionalAdds to the report: the pay ladder with your level marked

Which of these skills do you have

Essential skills for this occupation per the ESCO classification, most specific first. The report shows what you have and what separates you from the occupation's profile.

optionalAdds to the report: the section “Your cut” — what you have and what is missing

Which of these do you use

Flagged by O*NET as frequently requested in this occupation. The report shows what you have and what is missing.

optionalAdds to the report: the tools gap, and from $49 what each tool is worth

optionalAdds to the report: the route out of this occupation, when you pick “change”

optionalAdds to the report: the purchasing-power comparison with that country

optionalAdds to the report: the opening section — your question answered from this report's own figures

Adds to the report: every pay figure recut for your metro, and its place in the national range

Adds to the report: the pay cut by industry, where the same job is paid differently

This is what we will put in your report

Pick the depth. The sections you ticked questions for are in every tier; the wider comparisons start at $49.

Compare the three reports

What you learn$29$49$99
What it pays in your city and industry✓✓✓
Working conditions, preparation, education✓✓✓
What you carry into another occupation✓✓✓
What this job is called in postings✓✓✓
How pay changed over the yearsbrief✓✓
Where the industry changes the number—✓✓
Where the work actually is—✓✓
What appeared and disappeared in the job—✓✓
How long it takes to become competent—✓✓
Where to move next and what to learn—✓✓
What AI is already changing in this job—✓✓
What your tools are worth on the market—✓✓
What to study to get in—✓✓
What the same work pays in Britain——✓
What the same work pays in Canada——✓
Who hires, by name, and at what rates——✓
The money ladder by skill level——✓
Cities that actually sponsor visas——✓
Sections in the report, typically73–7155–16198–23
Who it is forIf you are deciding whether this work is worth your time.If you are in the occupation and deciding where to move next.If you are aiming for an offer abroad.
No payment is taken now. We reply with a secure payment link.

What changed since 2022

Comparing O*NET release 27.1 (2022-11-01) with 30.3 (2026-05-01). Signs, not colour alone, carry the meaning.

Now listed 48

+Geographic information system GIS systems+Management information systems MIS+Platform as a service PaaS+Microsoft Windows Server+Amazon Simple Storage Service S3+C+C#+Oracle Java+Enterprise application integration EAI software+Microsoft Defender Antivirus+MITRE ATT&CK software+Snort+Slack+Network directory services software

No longer listed 1

−Operating system software

Diff across the O*NET releases held here in full since October 2015, following occupations through merges and retirements. O*NET re-surveys occupations on a rolling cycle, so “no change” can also mean “not re-surveyed”.

Related jobs

Business Intelligence AnalystsComputer Systems AnalystsDocument Management SpecialistsForensic Science TechniciansSecurity ManagersInformation Security AnalystsInformation Security EngineersIntelligence AnalystsPenetration TestersSecurity Management Specialists

O*NET 30.3 related occupations

Also called

Cyber AnalystThreat AnalystMalware AnalystDigital AnalystSecurity AnalystThreat ResearcherIncident ResponderOperations AnalystCyber Threat HunterDigital InvestigatorCyber Threat AnalystLegal Digital Analyst

O*NET 30.3 alternative titles

The same work in Europe

ESCO occupationISCOMatch
digital forensics expert2529.2exact

Official ESCO ↔ O*NET crosswalk (ESCO Secretariat with USDOL/ETA)

Keep exploring

See labor-market evidence in motion.

Watch short Tamhu stories about pay, growth and how work changes — then return to the source data here.

Watch on YouTube →

Watch this occupation

This job has changed before and it will change again. We'll email you when the data moves — a tool appears, a skill gains weight, the pay distribution shifts. Free, and one click to stop.

Check your inbox — your watch starts only after you confirm.

We send data, not advice. No sharing, no resale. Privacy